Qualcomm Software Center — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Software Center, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-25254 — CVSS 9.8 (critical): Improper authorization leads to Remote Code Execution via SocketIO interface.
• CVE-2026-25255 — CVSS 8.8 (high): Exposed dangerous function lead to privilege escalation via gRPC server.
• CVE-2026-25264 — CVSS 8.8 (high): Privilege escalation due to weak configuration during package extraction process.
• CVE-2026-25265 — CVSS 8.8 (high): Privilege escalation due to weak configuration while temporary file handling.